US20040133797A1 - Rights management enhanced storage - Google Patents
Rights management enhanced storage Download PDFInfo
- Publication number
- US20040133797A1 US20040133797A1 US10/337,196 US33719603A US2004133797A1 US 20040133797 A1 US20040133797 A1 US 20040133797A1 US 33719603 A US33719603 A US 33719603A US 2004133797 A1 US2004133797 A1 US 2004133797A1
- Authority
- US
- United States
- Prior art keywords
- data
- rights
- content
- requester
- module
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Abandoned
Links
- 238000007689 inspection Methods 0.000 claims abstract description 26
- 230000005540 biological transmission Effects 0.000 claims abstract description 15
- 238000013475 authorization Methods 0.000 claims abstract description 11
- 238000000034 method Methods 0.000 claims description 39
- 238000012550 audit Methods 0.000 claims description 7
- 230000004044 response Effects 0.000 claims description 7
- 238000007726 management method Methods 0.000 description 41
- 230000008569 process Effects 0.000 description 20
- 238000012384 transportation and delivery Methods 0.000 description 10
- 239000003795 chemical substances by application Substances 0.000 description 7
- 238000012545 processing Methods 0.000 description 6
- 238000012986 modification Methods 0.000 description 5
- 230000004048 modification Effects 0.000 description 5
- 238000010586 diagram Methods 0.000 description 4
- 230000007246 mechanism Effects 0.000 description 4
- 238000005516 engineering process Methods 0.000 description 3
- 238000011156 evaluation Methods 0.000 description 3
- 230000006870 function Effects 0.000 description 3
- 230000010354 integration Effects 0.000 description 3
- 238000012546 transfer Methods 0.000 description 3
- 230000006854 communication Effects 0.000 description 2
- 238000004891 communication Methods 0.000 description 2
- 238000013507 mapping Methods 0.000 description 2
- 230000003287 optical effect Effects 0.000 description 2
- 230000008520 organization Effects 0.000 description 2
- 238000011084 recovery Methods 0.000 description 2
- XOJVVFBFDXDTEG-UHFFFAOYSA-N Norphytane Natural products CC(C)CCCC(C)CCCC(C)CCCC(C)C XOJVVFBFDXDTEG-UHFFFAOYSA-N 0.000 description 1
- 238000010420 art technique Methods 0.000 description 1
- 230000007175 bidirectional communication Effects 0.000 description 1
- 230000008859 change Effects 0.000 description 1
- 238000013480 data collection Methods 0.000 description 1
- 230000001419 dependent effect Effects 0.000 description 1
- 238000000151 deposition Methods 0.000 description 1
- 230000000694 effects Effects 0.000 description 1
- 239000000284 extract Substances 0.000 description 1
- 239000000835 fiber Substances 0.000 description 1
- 238000009434 installation Methods 0.000 description 1
- 230000002452 interceptive effect Effects 0.000 description 1
- 230000000737 periodic effect Effects 0.000 description 1
- 230000001960 triggered effect Effects 0.000 description 1
Images
Classifications
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L63/00—Network architectures or network communication protocols for network security
- H04L63/04—Network architectures or network communication protocols for network security for providing a confidential data exchange among entities communicating through data packet networks
- H04L63/0428—Network architectures or network communication protocols for network security for providing a confidential data exchange among entities communicating through data packet networks wherein the data content is protected, e.g. by encrypting or encapsulating the payload
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
- G06F21/10—Protecting distributed programs or content, e.g. vending or licensing of copyrighted material ; Digital rights management [DRM]
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
- G06F21/10—Protecting distributed programs or content, e.g. vending or licensing of copyrighted material ; Digital rights management [DRM]
- G06F21/16—Program or content traceability, e.g. by watermarking
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L63/00—Network architectures or network communication protocols for network security
- H04L63/04—Network architectures or network communication protocols for network security for providing a confidential data exchange among entities communicating through data packet networks
- H04L63/0428—Network architectures or network communication protocols for network security for providing a confidential data exchange among entities communicating through data packet networks wherein the data content is protected, e.g. by encrypting or encapsulating the payload
- H04L63/0464—Network architectures or network communication protocols for network security for providing a confidential data exchange among entities communicating through data packet networks wherein the data content is protected, e.g. by encrypting or encapsulating the payload using hop-by-hop encryption, i.e. wherein an intermediate entity decrypts the information and re-encrypts it before forwarding it
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L63/00—Network architectures or network communication protocols for network security
- H04L63/10—Network architectures or network communication protocols for network security for controlling access to devices or network resources
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F2221/00—Indexing scheme relating to security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
- G06F2221/21—Indexing scheme relating to G06F21/00 and subgroups addressing additional information or applications relating to security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
- G06F2221/2135—Metering
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L2463/00—Additional details relating to network architectures or network communication protocols for network security covered by H04L63/00
- H04L2463/101—Additional details relating to network architectures or network communication protocols for network security covered by H04L63/00 applying security measures for digital rights management
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L63/00—Network architectures or network communication protocols for network security
- H04L63/08—Network architectures or network communication protocols for network security for authentication of entities
Definitions
- the present invention relates to management of rights in content that is distributed in electronic format.
- Electronic format is typically regarded as being a digital format, i.e., binary, but the present invention is not limited as such, and any suitable format may be employed.
- An enforcement of digital rights encompasses enforcement of copyrights and licensing rights, and access to media. Enforcement may also extend to enforcement of a confidentiality agreement with respect to the content or the privacy concerns with disclosure of the content.
- Processing proceeds to authorization process 510 , which determines whether access is allowed and authorizes a transmission of the content to client station 100 in accordance with the content rights.
- a system administrator can configure a set of classifications.
- Rights management rules 610 are used to evaluate the permissibility of allowing access. Examples of rules for this type of evaluation could be:
Abstract
There is provided a system for managing content rights in data that is distributable over a network. The system includes a rights inspection module to determine whether the data is subject to a content right, and an authorization module to authorize a transmission of the data to a customer device in accordance with the content right.
Description
- 1. Field of the Invention
- The present invention relates to digital rights management, privacy management, and ad-hoc collaboration of on-line content including digital media. An embodiment of the present invention provides for integration of rights management into a file system, and integration of rights enforcement of content into a file system such that application access can be accomplished through a standard interface without requiring modification of the application. The integration of rights management into standard application interfaces enables a layering of rights management without application changes thus permitting more ubiquitous rights management.
- 2. Description of the Prior Art
- “Content” is a term often used to describe information. Such information is often stored on a storage media such as a magnetic disk, an optical disk, a magnetic tape or an electronic memory. A digital representation of such content can be delivered from a storage device to a user or client, online. That is, over a network, such as an Intranet, the Internet or a cable television network. For the client, online delivery improves timeliness and convenience. For an owner or publisher of the content, online delivery reduces delivery costs as compared to delivery of a hard copy or tangible storage media.
- The owner or publisher typically wishes to ensure receipt of a payment for the client's access to the content and also wishes for the client to observe certain restrictions on the use and further distribution of the content. Unfortunately, online delivery makes it relatively easy for a third party to obtain pristine digital content and to pirate the content at the expense and harm of the owner and publisher.
- “Digital rights” relate to the property interest that an owner has in content stored in a digital media. Techniques for enforcing an owner's content restrictions, for example, by restricting the client's right to save content to a storage device, are presently available to owners. However, in order to make use of such content restrictions practical in a widely distributed online environment, there must be a mechanism by which a client can be readily identified and supplied with content in a secure manner. Prior art related to limiting access rights to digital content in an information system includes the several patents indicated below.
- U.S. Pat. No. 4,827,508, U.S. Pat. No. 4,977,594, which is a division of the '508 patent, and U.S. Pat. No. 5,050,213, which is a continuation of the '594 patent, describe a database access system and method at a user site which permits authorized users to access and use the database and prevent unauthorized database use and copying. A facility is disclosed for measuring usage of the on-site database for purposes of billing the user according to the amount the database has been used. Periodically, the measured usage information is conveyed to the database owner while preventing the user from tampering with the measured usage information.
- U.S. Pat. No. 5,436,972 describes a method for preventing inadvertent betrayal by a trustee of an escrowed digital secret. After unique identification data describing a user has been entered into a computer system, the user is asked to select a password to protect the system. All personal identifying data, together with the password, is encrypted with a trustee's public key and stored, for example, in the user's computer system as an escrow security record. The password is then used to encrypt all data on the user's disk. If at some point in time, the user forgets the password, the user contacts the trustee's, for example, the vendor or the manufacturer. The trustee utilizes documentary evidence presented by the alleged legitimate user and determines whether such evidence matches with the previously encrypted escrowed information stored in the escrow records created by the user. If the records agree, then the trustee has confidence that the true owner is making request and that revealing the secret password will not betray the owner's interest.
- U.S. Pat. No. 5,557,518 describes a system to open electronic commerce using a trusted agent. A customer-trusted agent securely communicates with a first money module. A merchant-trusted agent securely communicates with a second money module. Both trusted agents are capable of establishing a first cryptographically-secure session. Both money modules are capable of establishing a second cryptographically-secure session. The merchant-trusted agent transfers electronic merchandise to the customer-trusted agent, and the first money module transfers electronic money to the second money module. The money module informs the trusted agents of the successful completion of payment and the customer may use the purchased electronic merchandise.
- U.S. Pat. No. 5,557,765 discloses a system and method for data recovery. An encrypting user encrypts a method using a secret storage key (KS) and attaches a Data Recovery Field (DRF), including an Access Rule Index (ARI) and the KS to the encrypted message. The DRF and the encrypted message are stored in a storage device. To recover the storage key (KS) a decrypting user extracts and sends the DRF to a Data Recover Center (DRC) and issues a challenge based on Access Rules (ARs) originally defined by the encrypting user. If the encrypting user meets the challenge, the DRC sends the KS in a message to the encrypting user. Generally, KS need not be an encryption key but could represent any piece of confidential information that can fit inside the DRF. In all cases, the DRC limits access to decrypting users who can meet the challenge to find in either the ARs defined by the encrypting user or the ARs defined for override access.
- U.S. Pat. No. 5,590,199 describes a system for authenticating and authorizing a user to access services on a heterogeneous computer network. The system includes at least one workstation and one authorization server connected to each other through a network. A user couples a personally protectable coprocessor (smart card) to the workstation by means of a bidirectional communications channel. The coprocessor is adapted to receive signals including first encrypted authentication information and decrypt the first encrypted authentication information using a preselected first key. The coprocessor is further adapted to assemble and encrypt second authentication information using a preselected second key and to transmit the encrypted second encrypted authentication information to the workstation. The workstation then communicates the information on to the network whereby the user is authenticated to access the network computer or service.
- U.S. Pat. No. 6,098,056 describes a system and method for limiting access to and preventing unauthorized use of an owner's digital content stored in an information network and available to clients under authorized conditions. The network includes at least one server coupled to a storage device for storing the limited access digital content encrypted using a random-generated key, known as a Document Encryption Key (DEK). The DEK is further encrypted with the server's public key, using a public/private key pair algorithm and placed in a digital container stored in a storage device and including as a part of the meta-information that is in the container. The client's workstation is coupled to the server for acquiring the limited access digital content under the authorized condition. A Trusted Information Handler (TIH) is validated by the server after the handler provides a data signature and type of signing algorithm to transaction data descriptive of the purchase agreement between the client and the owner. After the handler has authenticated, the server decrypts the encrypted DEK with its private key and re-encrypts the DEK with the handler's public key ensuring that only the information handler can process the information. The encrypted DEK is further encrypted with the client's public key personalizing the digital content to the client. The client's program decrypts the DEK with his private key and passes it along with the encrypted content to the handler which decrypts the DEK with his private key and proceeds to decrypt the content for displaying to the client.
- U.S. Pat. No. 6,330,670 describes a digital rights management operating system that protects rights-managed data, such as downloaded content, from access by untrusted programs while the data is loaded into memory or on a page file as a result of the execution of a trusted application that accesses the memory. To protect the rights-managed data resident in memory, the digital rights management operating system refuses to load an untrusted program into memory while the trusted application is executing or removes the data from memory before loading the untrusted program. If the untrusted program executes at the operating system level, such as a debugger, the digital rights management operating system renounces a trusted identity created for it by the computer processor when the computer was booted. To protect the rights-managed data on the page file, the digital rights management operating system prohibits raw access to the page file, or erases the data from the page file before allowing such access. Alternatively, the digital rights management operating system can encrypt the rights-managed data prior to writing it to the page file. The digital rights management operating system also limits the functions the user can perform on the rights-managed data and the trusted application, and can provide a trusted clock used in place of the standard computer clock.
- IBM Corporation currently offers a digital rights management technology known as a Cryptolope™, which stands for cryptographic envelope technology. A Cryptolope object is used for secure, protected delivery of digital content. A cryptographic envelope uses encryption to prevent an eavesdropper from absconding with the content, and also uses a digital signature to offer an end user a guarantee that the content is genuine. A Cryptolope object ties usage conditions of the content to the content itself. For example, the content owner might specify that viewing the content can only be done with a special viewer. Or, for certain types of content, the owner might specify that it can only be delivered to a system that is capable of applying a digital watermark. Because the Cryptolope object is digitally signed, usage conditions cannot be tampered with without invalidating the cryptographic envelope. A Cryptolope object is a self-contained and self-protecting object, and can be delivered any way that is convenient. Thus, a Cryptolope object can be placed on a CD-ROM, mirrored to a file transfer protocol (FTP) site, or passed casually from a first user to a second user, all without breaking the underlying security.
- The aforementioned prior art techniques are generally directed towards solutions that require a modification to a user's computer, or an installation of some special software on the user's computer. Often, such software is specific to a particular distributor, and as such, the user cannot readily obtain content from a distributor unless the user has an established relationship with the particular distributor. Also the digital rights owner needs to create a system for the rights enforcement rather than being able to use an existing system.
- For example, consider a case of a customer that wishes to rent and download a movie from a video distributor via the Internet. To download the movie from a first video distributor, the customer would need to obtain a first software application that enforces the rights of the owner of the movie. To download the movie from a second video distributor, the customer would need to obtain a second, different, software application for enforcing the owner's rights. To further complicate the situation, if the customer thereafter wished to download music media from a music provider via the Internet, the customer would need to obtain yet another software application for enforcing the rights of the owner of the music media. This need for a plurality of different software applications is due, in part, to an absence of firm standards for the enforcement of rights. In addition the enforcement for different types of rights such as copyright, privacy, confidentiality, intellectual property rights are different for each system and are not consistently enforceable in prior art systems.
- Thus, there is a need for an improved system for managing rights associated with online media.
- The present invention provides rights management for digital media that does not require a change to an existing software application, and can be achieved transparently to existing applications and methods of storing and retrieving digital content.
- An embodiment of the invention is a system for managing content rights in data that is distributable over a network. The system includes a rights inspection module to determine whether the data is subject to a content right, and an authorization module to authorize a transmission of the data to a customer device in accordance with the content right.
- Another embodiment of the invention is a system for managing content rights in data that is distributable over a network. The system includes a collection module to enable a publisher of the data to update a database of information relating to a content right in the data, a rights inspection module to determine whether the data is subject to the content right, and an authorization module to authorize a transmission of the data to a customer device in accordance with the content right. The rights inspection module is invoked in response to a request from a requester of the data, and the rights inspection module considers an identity of the requester and a role of the requester when making the determination.
- FIG. 1 is a functional block diagram of a rights management system for reading digital content configured for employment of the present invention.
- FIG. 2 is a functional block diagram of a rights management system for employment of the present invention and involved with a publication or writing of digital content to the rights management system.
- The present invention relates to management of rights in content that is distributed in electronic format. Electronic format is typically regarded as being a digital format, i.e., binary, but the present invention is not limited as such, and any suitable format may be employed. An enforcement of digital rights encompasses enforcement of copyrights and licensing rights, and access to media. Enforcement may also extend to enforcement of a confidentiality agreement with respect to the content or the privacy concerns with disclosure of the content.
- The invention manages rights with respect to any transmitted media, including, for example, software, audio (e.g., music), video (e.g., television), where a customer wishes to download such media from a media provider. It can also be used to manage access to an interactive venue, such as a web site, where the customer may thereafter be granted access to proprietary content. It could also be used to protect medical images for which privacy rights management is required. For the purpose of clarity, certain aspects of the invention are presented herein in the context of an exemplary video distribution system where a customer wishes to download a movie from a video distributor.
- On embodiment of the present invention is a rights management system that executes a method for managing content rights in data that is distributable over a computer network. The method includes determining whether the data is subject to a content right, and authorizing a transmission of the data to a customer device in accordance with the content right.
- In another embodiment, the rights management system executes a method that includes enabling a publisher of the data to update a database of information relating to a content right in data, determining whether the data is subject to the content right, authorizing a transmission of the data to a customer device in accordance with the content right, and reporting of access records and statistics. The step of determining is invoked in response to a request from a requester of the data, and considers an identity of the requester and a role of the requester when making the determination.
- FIG. 1 is a functional block diagram of a computer network configured to include a rights management system in accordance with the present invention. The network can be implemented as any suitable data or communications network, where communication between components therein may be accomplished via wire, fiber optic or wireless resources. In its preferred embodiment, the network is implemented over the Internet. The principal components of the network include a
client station 100 running a user application, afile system interface 200, alogin identity database 300, auser roles database 400, acontent rights database 600 and a rights management system that includes a rightsmanagement inspection process 500, anauthorization process 510, a determination process 520, an audit log andaccess statistics database 700, astorage device 750, a decryption/dewrapping process 800, and adelivery process 850. - Network File System (NFS) and Common Internet File System (CIFS) are client/server applications that allow a computer to access a file on a remote device. NFS was developed by Sun Microsystems, and CIFS was developed by Microsoft Corporation. A daemon is a program that runs continuously and handles periodic service requests from a client station. Daemons are well known in the art, where, for example, a server of a page on the Web, i.e., the World Wide Web of the Internet, may have a daemon that waits for requests from Web clients.
File system interface 200 is shown as containing an NFS/CIFS daemon to make clear that the present invention is contemplated as being compatible with these technologies. The daemon offile system interface 200 handles service requests fromclient station 100. Upon receipt of such a request, it forwards the request to rightsmanagement inspection process 500. -
Storage device 750 provides for storage of the content being protected and for purposes of the present example contains a movie. -
File system interface 200 andstorage device 750 can be regarded for example as components of a network-attached storage (NAS) system. NAS is a form of storage, typically hard disk storage, set up with its own network address rather than being attached to a department computer that is serving applications to a network's workstation users. By removing storage access and its management from the department server, application programming and files can be served faster because they are not competing for the same processor resources. In an NAS system, an NAS file server, e.g.,file system 200, is attached to a local area network, for example, an Ethernet network, and assigned an Internet protocol (IP) address. File requests are mapped by a main server to the NAS file server. An appropriate manner of deployment is to have the NFS, CIFS, FTP or other common Internet standard for file access deployed accessible to the Internet along with a web server that is collecting information associated with the rights management. -
Client station 100 is a device that a customer uses to access content stored in the system.Client station 100 may be implemented on a general purpose microcomputer, such as one of the members of the Sun™ Microsystems family of computer systems, one of the members of the IBM™ Personal Computer family, and preferably includes a browser. A browser is a program used to view, download, upload, surf or otherwise access data via the Internet.Client station 100 could alternatively be implemented as an interface device, such as a television set top box (STB), into which the content fromstorage device 750 may ultimately be loaded for a contemporaneous or subsequent viewing or use by a customer. - Assume that a user at
client station 100 wishes to read some content that is stored onstorage device 750. To initiate file access,client station 100 sends a request for the content to filesystem interface 200. In the case of a web browser this is done using a standard interface without modification of the client's application for access. - The user application on
client station 100 performs a login providing identity information. This is done using standard interfaces such as providing a user id and password, or presenting a digital certificate that can be cryptographically verified. Often the identity information may have already been established by some other common mechanism and the identity information is provided as part of the context of the request (for instance in an http header). The present invention is not dependent upon a particular authentication mechanism, and instead accommodates existing login methods deployed in the industry. -
File system interface 200 authenticates the requesting identity as required by the customer chosen authentication mechanism chosen. Regardless of the method, the identity is validated againstlogin identity database 300, an update made to the database, if required, includes context of the request such as network, access method, or entry point. By example, the identity may be anonymous with the identity being derived from the network context of the request. For instance, content that could be shared within an organization without restriction could derive the identity from the originating address information, while users outside of an internal firewall protected network would not be allowed access because the derived identity would be outside of the originating addresses known by the organization as internal and trusted. Another example is where within an Internet Service Provider the Point of Presence (POP) has some identity associated with the originating IP address based upon RADIUS login information exchanged during assignment of the IP address which could be referenced forlogin identity database 300. - The user application at
client station 100 requests content by passing a standard request to the appropriatefile system interface 200, including the content identification. The content request is unaware of the rights management enforcement and makes the request as it would to any NAS or file system. -
File system interface 200 communicates the requesting identity and the requested content to rightsmanagement inspection process 500, which exercises rules mapping the requesting identity to a role, and determines whether the content is subject to a content right. A system administrator can define groups or roles, and the rules could consist of any rules for deriving the group or role associated with an identity, but by example could be a set of regular expression matching such as: - (a) If IP address is within my enterprise, then assign role of insider.
- (b) If IP address is outside my enterprise, then assign role of outsider.
- (c) If identity is a user id registered in our database with an account balance of greater than $20, then assign role of pre-paid subscriber.
- (d) If identity is a user id registered in our database with an account balance of less than 0, then assign role of deadbeat.
- (e) If identity is within the group publisher, then assign role of publisher.
- (f) If identity is within the group distributor, then assign role of distributor.
- (g) If identity is related to another identity or entity, such as a physician to patient relationship, then assign role of validated third party.
- Thus by evaluation of rules, a role is associated with an identity. During this processing
user roles database 400 is utilized for mapping of information during the evaluation of rules such as checking whether an identity is in a group or has a relationship to another identity. - Rights
management inspection process 500 determines the rights associated with the content by exercising a similar set of rules as illustrated above for assigning a classification of the content. For instance the rules could be: - (a) If the content is not protected, then assign classification of unrestricted.
- (b) If the content is protected and payment is required, then assign classification of pay per view.
- (c) If the content is protected and privacy is of concern then assign classification of private.
- These rules access
content rights database 600, which is associated with content stored instorage device 750. - Processing proceeds to
authorization process 510, which determines whether access is allowed and authorizes a transmission of the content toclient station 100 in accordance with the content rights. A system administrator can configure a set of classifications. Rights management rules 610 are used to evaluate the permissibility of allowing access. Examples of rules for this type of evaluation could be: - (a) If the classification of the content is unrestricted, then permit access.
- (b) If the classification of the content is pay per view and the role is pre paid subscriber, then permit access.
- (c) If the classification of the content is pay per view and the role is deadbeat, then deny access.
- (d) If the classification of the content is private and the role is validated third party, then permit access.
- If access is not allowed then deny the request and return a negative response to the user application on
client station 100. If access is allowed then continue with decryption/dewrapping process 800. - Decryption/
dewrapping process 800 determines whether decryption or de-wrappering of the data is required, and if yes, performs the required operations. The wrappering process consists of adding a header and potentially a trailer to the content in effect surrounding it with meta-data pertaining to the rights management. De-wrappering consists of removing the header and trailer and restoring the content back to its original form. For instance one implementation of the wrapper would be to use XML to encode the pertinent data regarding the originator of the content, owner of the rights, and the nature of the content. Rights management rules 610 are consulted for a determination of whether any additional processing is required on the content prior to delivery toclient station 100. - Decryption/
dewrapping process 800 also includes a usage module to update audit log andaccess statistics database 700, which contains information relating to usage of the content. For example, the usage information may include usage statistics such that content owners could use the statistics to verify proper usage of their content and for purposes of calculating royalties. Decryption/dewrapping process 800 could also write an access audit log entry to audit log andaccess statistics database 700 if, for instance, the content was classified as private and there is a legal requirement for an audit log to be kept of access. - Processing continues with determination process520, which determines whether special treatment such as metering, watermarking, or wrappering with an enforcement application is required. Rights management rules 610 are used to determine which additional special treatment may be required. If no special treatment is required, then return the content to
client station 100, otherwise processing continues withdelivery process 850. -
Delivery process 850 performs special treatment and returns the content toclient station 100. The special treatment could include, but would not be restricted to, the following methods: - (1) Metering. This is a technique where the rate at which the content is delivered is consistent with on-line viewing, but would not support downloading of content such as a movie faster than real time viewing.
- (2) Watermarking. This is a technique of embedding a digital fingerprint inside of a digital media object such that any further distribution of the content could be traced, based upon the inclusion of the watermark.
- (3) Wrappering of content with a rights enforcement application. For example, the media viewer is triggered to enforce that the content cannot be saved and can only be viewed on the screen.
- If the access was denied, the requester, i.e., the user at
client station 100, has the option of going to aweb page 900 that gathers identity information, verifies credentials and stores them to loginidentity database 300 anduser roles database 400. - FIG. 2 is a functional block diagram of a rights management system showing processes for publication or writing of content to the rights management system. If the user is depositing content, then the collection of content rights is done through
web page 900 andcontent rights database 600 androles database 400 are updated. - The user application at
client station 100 performs a login using similar techniques as described previously for the content read, as described in association with FIG. 1. The user application interacts with a data collection application, for illustration purposes a web page, to collect information associated with the content that is to be published. This information includes: - (1) the identities and roles that are associated with the content, which are then stored in
login database 300 anduser roles database 400; - (2) the particular rights associated with the content, which are then stored in
content rights database 600; and - (3) any special treatment to which the content should be subjected when it is read, which are obtained by a
content treatment process 790. - Note that these may be specified either per individual content selection, or for a group of content.
- In a preferred embodiment of the present invention, all rights management specification is done out of band, i.e. not by the user's application, thus permitting the content flow to be unchanged and able to be accessed by the widest variety of unmodified user applications. The content is wrapped with rights management information that is added transparently during the write and removed transparently during the read. Some of the information required for processing is derived from the environment of the request rather than explicitly by the application.
- Although the invention is presented herein in the context of distributing a movie, it is suitable for an online distribution of any appropriate content. As such it may be employed in fields as diverse as publishing, advertising, e-learning, entertainment, streaming video, control systems. The system could be used for collaboration requiring access to protected content. The system could be used for protecting private information such as medical records.
- The rights management system of the present invention may be implemented by special-purpose hardware, that is, hardware modules specifically designed to perform the functions described herein. However, the rights management system can also be implemented in software as a set of program modules that are stored in a memory (not shown), and that contain instructions for controlling a processor (not shown) that, in turn, performs the functions.
- Also, note that the instructions can reside on an external storage media (not shown) for subsequent loading into the memory. Such a storage media can be any conventional storage media, including, but not limited to, a floppy disk, a compact disk, a magnetic tape, a read only memory, or an optical storage media. The storage media could also be a random access memory, or other type of electronic storage, located on a remote storage system and coupled to the rights management system.
- It should be understood that various alternatives and modifications of the present invention could be devised by those skilled in the art. The present invention is intended to embrace all such alternatives, modifications and variances that fall within the scope of the appended claims.
Claims (23)
1. A system for managing content rights in data that is distributable over a network, comprising:
a rights inspection module to determine whether said data is subject to a content right; and
an authorization module to authorize a transmission of said data to a customer device in accordance with said content right.
2. The system of claim 1 , wherein said rights inspection module receives a request for said data via a daemon.
3. The system of claim 1 , wherein said rights inspection module is remotely located from a client station, and receives a request for said data from said client station via a file system interface.
4. The system of claim 1 , wherein said data resides on a network attached storage (NAS) device that is remotely located from said system.
5. The system of claim 1 , wherein said rights inspection module designates a classification for said data selected from the group consisting of unrestricted, pay-per-view and private.
6. The system of claim 1 ,
wherein said rights inspection module is invoked in response to a request from a requester of said data, and
wherein said rights inspection module considers an identity of said requester and a role of said requester when making said determination.
7. The system of claim 6 , wherein said role is selected from the group consisting of:
(a) an insider, based on said requester sending said request from an Internet protocol (IP) address inside of an enterprise;
(b) an outsider, based on said requester sending said request from an Internet protocol (IP) address outside of an enterprise;
(c) a pre-paid subscriber, based on said requester having an account balance of greater than a predetermined value;
(d) a deadbeat, based on said requester having an account balance of less than a predetermined value;
(e) a group title, based on said requester being a member of a particular group; and
(f) a validated third party, based on said requester having a relationship with a third party.
8. The system of claim 7 ,
wherein said rights inspection module designates a classification for said data selected from the group consisting of unrestricted, pay-per-view and private, and
wherein said authorization module evaluates a condition selected from the group consisting of:
(a) if said classification is unrestricted, then permit access;
(b) if said classification is pay per view and said role is pre paid subscriber, then permit access;
(c) if said classification is pay per view and said role is deadbeat, then deny access; and
(d) if said classification is private and said role is validated third party, then permit access.
9. The system of claim 1 ,
wherein said rights inspection module queries a database of information relating to said content right, and
wherein said system further comprises a collection module to enable a publisher of said data to update said database.
10. The system of claim 1 , further comprising a treatment module to apply a treatment to said data prior to said transmission, wherein said treatment is selected from the group consisting of:
(a) decrypting said data;
(b) dewrapping said data;
(c) metering said data;
(d) watermarking said data; and
(e) wrappering said data with an access enforcement code.
11. The system of claim 1 , further comprising a usage module to update a database of information relating to usage of said data.
12. A system for managing content rights in data that is distributable over a network, comprising:
a collection module to enable a publisher of said data to update a database of information relating to a content right in said data;
a rights inspection module to determine whether said data is subject to said content right;
an authorization module to authorize a transmission of said data to a customer device in accordance with said content right; and
an audit and usage tracking module for reporting of access records and statistics,
wherein said rights inspection module is invoked in response to a request from a requester of said data, and
wherein said rights inspection module considers an identity of said requester and a role of said requester when making said determination.
13. The system of claim 12 , wherein said rights inspection module receives said request via a daemon.
14. The system of claim 13 , wherein said rights inspection module is remotely located from a client station, and receives said request for said data from said client station via a file system interface.
15. The system of claim 12 , wherein said data resides on a network attached storage (NAS) device that is remotely located from said system.
16. The system of claim 12 , further comprising a treatment module to apply a treatment to said data prior to said transmission, wherein said treatment is selected from the group consisting of:
(a) decrypting said data;
(b) dewrapping said data;
(c) metering said data;
(d) watermarking said data; and
(e) wrappering said data with an access enforcement code.
17. The system of claim 12 , further comprising a usage module to update a database of information relating to usage of said data.
18. A storage media containing instructions for controlling a processor to managing content rights in data that is distributable over a network, said storage media comprising:
a rights inspection module for controlling said processor to determine whether said data is subject to a content right; and
an authorization module for controlling said processor to authorize a transmission of said data to a customer device in accordance with said content right.
19. The storage media of claim 18 , further comprising a usage module for controlling said processor to update a database of information relating to usage of said data.
20. A storage media containing instructions for controlling a processor to managing content rights in data that is distributable over a network, said storage media comprising:
a collection module for controlling said processor to enable a publisher of said data to update a database of information relating to a content right in said data;
a rights inspection module for controlling said processor to determine whether said data is subject to said content right;
an authorization module for controlling said processor to authorize a transmission of said data to a customer device in accordance with said content right; and
an audit and usage tracking module for reporting of access records and statistics,
wherein said rights inspection module is invoked in response to a request from a requester of said data, and
wherein said rights inspection module considers an identity of said requester and a role of said requester when making said determination.
21. A method for managing content rights in data that is distributable over a network, comprising:
determining whether said data is subject to a content right; and
authorizing a transmission of said data to a customer device in accordance with said content right.
22. A method for managing content rights in data that is distributable over a network comprising:
enabling a publisher of said data to update a database of information relating to a content right in said data;
determining whether said data is subject to said content right;
authorizing a transmission of said data to a customer device in accordance with said content right; and
reporting of access records and statistics,
wherein said determining is invoked in response to a request from a requester of said data, and
wherein said determining considers an identity of said requester and a role of said requester when making said determination.
23. A system for managing content rights in data that is distributable over a network, comprising:
means for determining whether said data is subject to a content right; and
means for authorizing a transmission of said data to a customer device in accordance with said content right.
Priority Applications (3)
Application Number | Priority Date | Filing Date | Title |
---|---|---|---|
US10/337,196 US20040133797A1 (en) | 2003-01-06 | 2003-01-06 | Rights management enhanced storage |
PCT/GB2003/005509 WO2004061623A1 (en) | 2003-01-06 | 2003-12-17 | Content rights management system |
AU2003292431A AU2003292431A1 (en) | 2003-01-06 | 2003-12-17 | Content rights management system |
Applications Claiming Priority (1)
Application Number | Priority Date | Filing Date | Title |
---|---|---|---|
US10/337,196 US20040133797A1 (en) | 2003-01-06 | 2003-01-06 | Rights management enhanced storage |
Publications (1)
Publication Number | Publication Date |
---|---|
US20040133797A1 true US20040133797A1 (en) | 2004-07-08 |
Family
ID=32681193
Family Applications (1)
Application Number | Title | Priority Date | Filing Date |
---|---|---|---|
US10/337,196 Abandoned US20040133797A1 (en) | 2003-01-06 | 2003-01-06 | Rights management enhanced storage |
Country Status (3)
Country | Link |
---|---|
US (1) | US20040133797A1 (en) |
AU (1) | AU2003292431A1 (en) |
WO (1) | WO2004061623A1 (en) |
Cited By (47)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
US20030033321A1 (en) * | 2001-07-20 | 2003-02-13 | Audible Magic, Inc. | Method and apparatus for identifying new media content |
US20030135623A1 (en) * | 2001-10-23 | 2003-07-17 | Audible Magic, Inc. | Method and apparatus for cache promotion |
US20040163106A1 (en) * | 2003-02-01 | 2004-08-19 | Audible Magic, Inc. | Method and apparatus to identify a work received by a processing system |
US20050154678A1 (en) * | 2001-04-05 | 2005-07-14 | Audible Magic Corporation | Copyright detection and protection system and method |
US20060034177A1 (en) * | 2004-07-28 | 2006-02-16 | Audible Magic Corporation | System for distributing decoy content in a peer to peer network |
US20060186012A1 (en) * | 2001-01-30 | 2006-08-24 | Seda S.P.A. | Cardboard container for drinks and process therefor |
US20060230072A1 (en) * | 2005-04-08 | 2006-10-12 | Dlcom Grid Inc. | Secure digital couriering system and method |
US20060237465A1 (en) * | 2005-04-15 | 2006-10-26 | D Amato Gianfranco | Insulated container, method of fabricating same and apparatus for fabricating |
WO2007043989A1 (en) * | 2005-08-30 | 2007-04-19 | Amdocs Software Systems Limited | Pay-per-view payment system and method |
US20070255943A1 (en) * | 2006-04-18 | 2007-11-01 | Kern David S | Method and system for automating the recovery of a credential store |
US20080134346A1 (en) * | 2004-08-05 | 2008-06-05 | Yeong-Sub Cho | Transactions Certification Method And System To Protect Privacy On Details Of Electronic Transactions |
US20090007279A1 (en) * | 2007-06-28 | 2009-01-01 | Microsoft Corporation | Rights enforcement of unencrypted content |
US20090030651A1 (en) * | 2007-07-27 | 2009-01-29 | Audible Magic Corporation | System for identifying content of digital data |
US7529659B2 (en) | 2005-09-28 | 2009-05-05 | Audible Magic Corporation | Method and apparatus for identifying an unknown work |
US20090165079A1 (en) * | 2007-12-20 | 2009-06-25 | Frank Brunswig | Deriving Service Provider Constraints From Service Consumer Context |
US20090196465A1 (en) * | 2008-02-01 | 2009-08-06 | Satish Menon | System and method for detecting the source of media content with application to business rules |
US20090240361A1 (en) * | 2000-11-03 | 2009-09-24 | Wold Erling H | Method and apparatus for creating a unique audio signature |
US20100161729A1 (en) * | 2008-12-24 | 2010-06-24 | Chalk Media Service Corp. | System, network and method for multi-platform publishing and synchronized content |
US20100169394A1 (en) * | 2008-12-26 | 2010-07-01 | Sandisk Il Ltd. | Method and apparatus for providing access to files based on user identity |
US20100169395A1 (en) * | 2008-12-26 | 2010-07-01 | Sandisk Il Ltd. | Device and method for filtering a file system |
US20100169780A1 (en) * | 2008-12-26 | 2010-07-01 | Sandisk Il Ltd. | Storage device managing playable content |
US20100169393A1 (en) * | 2008-12-26 | 2010-07-01 | Sandisk Il Ltd. | Storage device presenting to hosts only files compatible with a defined host capability |
US20100242087A1 (en) * | 2005-08-11 | 2010-09-23 | Canon Kabushiki Kaisha | Display data transmission device and method thereof |
US20100326869A1 (en) * | 2006-12-05 | 2010-12-30 | Seda S.P.A. | Package |
US7917645B2 (en) | 2000-02-17 | 2011-03-29 | Audible Magic Corporation | Method and apparatus for identifying media content presented on a media playing device |
US20110179083A1 (en) * | 2010-01-15 | 2011-07-21 | Galloway Curtis C | Accessing Specialized Fileserver |
US20110289095A1 (en) * | 2005-08-08 | 2011-11-24 | Google Inc. | Agent rank |
US8146797B2 (en) | 2005-11-11 | 2012-04-03 | Seda S.P.A. | Insulated cup |
US20120124642A1 (en) * | 2010-11-17 | 2012-05-17 | Samsung Sds Co., Ltd. | Apparatus and method for selectively decrypting and transmitting drm contents |
US20120144453A1 (en) * | 2010-12-06 | 2012-06-07 | International Business Machines Corporation | Identity based auditing in a multi-product environment |
US8199651B1 (en) | 2009-03-16 | 2012-06-12 | Audible Magic Corporation | Method and system for modifying communication flows at a port level |
US8393886B2 (en) | 2005-11-14 | 2013-03-12 | Seda S.P.A. | Device for producing a stacking projection and container with same |
US20130167200A1 (en) * | 2011-12-22 | 2013-06-27 | Microsoft Corporation | Techniques to store secret information for global data centers |
US20130298257A1 (en) * | 2010-07-27 | 2013-11-07 | Fasoo.Com Co., Ltd | Device for right managing web data, recording medium for performing method for right managing web data on computer, and device and method for providing right management information |
US20150006411A1 (en) * | 2008-06-11 | 2015-01-01 | James D. Bennett | Creative work registry |
US8972481B2 (en) | 2001-07-20 | 2015-03-03 | Audible Magic, Inc. | Playlist generation method and apparatus |
US9081778B2 (en) | 2012-09-25 | 2015-07-14 | Audible Magic Corporation | Using digital fingerprints to associate data with a work |
US9426158B1 (en) * | 2010-12-15 | 2016-08-23 | Amazon Technologies, Inc. | Client device connectivity with integrated business rules and multiple network types |
US20160342805A1 (en) * | 2005-12-29 | 2016-11-24 | Nextlabs, Inc. | Analyzing Activity Data of an Information Management System |
US9783359B2 (en) | 2005-09-08 | 2017-10-10 | Seda S.P.A. | Double-walled cup |
EP3274894A4 (en) * | 2015-07-22 | 2018-01-31 | Samsung Electronics Co., Ltd. | Display apparatus and display method |
CN110069476A (en) * | 2019-04-25 | 2019-07-30 | 安康学院 | A kind of Management System for Clients Information |
US20210150003A1 (en) * | 2018-07-09 | 2021-05-20 | Dish Network L.L.C. | Content anti-piracy management system and method |
US20220004649A1 (en) * | 2011-12-09 | 2022-01-06 | Sertainty Corporation | System and methods for using cipher objects to protect data |
WO2022126644A1 (en) * | 2020-12-18 | 2022-06-23 | 华为技术有限公司 | Model protection device, method, and computing device |
US11521194B2 (en) * | 2008-06-06 | 2022-12-06 | Paypal, Inc. | Trusted service manager (TSM) architectures and methods |
US11595820B2 (en) | 2011-09-02 | 2023-02-28 | Paypal, Inc. | Secure elements broker (SEB) for application communication channel selector optimization |
Citations (6)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
US5629980A (en) * | 1994-11-23 | 1997-05-13 | Xerox Corporation | System for controlling the distribution and use of digital works |
US5638513A (en) * | 1993-12-22 | 1997-06-10 | Ananda; Mohan | Secure software rental system using continuous asynchronous password verification |
US5790664A (en) * | 1996-02-26 | 1998-08-04 | Network Engineering Software, Inc. | Automated system for management of licensed software |
US5892900A (en) * | 1996-08-30 | 1999-04-06 | Intertrust Technologies Corp. | Systems and methods for secure transaction management and electronic rights protection |
US20010014882A1 (en) * | 1994-11-23 | 2001-08-16 | Stefik Mark J. | System for controlling the distribution and use of digital works using digital tickets |
US20020144132A1 (en) * | 2001-03-29 | 2002-10-03 | Koninklijke Philips Electronics N.V. | Apparatus and methods of preventing an adulteration attack on a content screening algorithm |
Family Cites Families (1)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
EP2955652A1 (en) * | 2000-06-16 | 2015-12-16 | MIH Technology Holdings BV | Methods and systems to distribute content via a network utilizing distributed conditional access agents and secure agents, and to perform digital rights management (drm) |
-
2003
- 2003-01-06 US US10/337,196 patent/US20040133797A1/en not_active Abandoned
- 2003-12-17 AU AU2003292431A patent/AU2003292431A1/en not_active Abandoned
- 2003-12-17 WO PCT/GB2003/005509 patent/WO2004061623A1/en not_active Application Discontinuation
Patent Citations (6)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
US5638513A (en) * | 1993-12-22 | 1997-06-10 | Ananda; Mohan | Secure software rental system using continuous asynchronous password verification |
US5629980A (en) * | 1994-11-23 | 1997-05-13 | Xerox Corporation | System for controlling the distribution and use of digital works |
US20010014882A1 (en) * | 1994-11-23 | 2001-08-16 | Stefik Mark J. | System for controlling the distribution and use of digital works using digital tickets |
US5790664A (en) * | 1996-02-26 | 1998-08-04 | Network Engineering Software, Inc. | Automated system for management of licensed software |
US5892900A (en) * | 1996-08-30 | 1999-04-06 | Intertrust Technologies Corp. | Systems and methods for secure transaction management and electronic rights protection |
US20020144132A1 (en) * | 2001-03-29 | 2002-10-03 | Koninklijke Philips Electronics N.V. | Apparatus and methods of preventing an adulteration attack on a content screening algorithm |
Cited By (109)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
US10194187B2 (en) | 2000-02-17 | 2019-01-29 | Audible Magic Corporation | Method and apparatus for identifying media content presented on a media playing device |
US7917645B2 (en) | 2000-02-17 | 2011-03-29 | Audible Magic Corporation | Method and apparatus for identifying media content presented on a media playing device |
US9049468B2 (en) | 2000-02-17 | 2015-06-02 | Audible Magic Corporation | Method and apparatus for identifying media content presented on a media playing device |
US8086445B2 (en) | 2000-11-03 | 2011-12-27 | Audible Magic Corporation | Method and apparatus for creating a unique audio signature |
US20090240361A1 (en) * | 2000-11-03 | 2009-09-24 | Wold Erling H | Method and apparatus for creating a unique audio signature |
US8146796B2 (en) | 2001-01-30 | 2012-04-03 | Seda S.P.A. | Cardboard container for drinks and process therefor |
US20060186012A1 (en) * | 2001-01-30 | 2006-08-24 | Seda S.P.A. | Cardboard container for drinks and process therefor |
US7797249B2 (en) | 2001-04-05 | 2010-09-14 | Audible Magic Corporation | Copyright detection and protection system and method |
US7707088B2 (en) | 2001-04-05 | 2010-04-27 | Audible Magic Corporation | Copyright detection and protection system and method |
US8645279B2 (en) | 2001-04-05 | 2014-02-04 | Audible Magic Corporation | Copyright detection and protection system and method |
US8775317B2 (en) | 2001-04-05 | 2014-07-08 | Audible Magic Corporation | Copyright detection and protection system and method |
US20080155116A1 (en) * | 2001-04-05 | 2008-06-26 | Audible Magic Corporation | Copyright detection and protection system and method |
US9589141B2 (en) | 2001-04-05 | 2017-03-07 | Audible Magic Corporation | Copyright detection and protection system and method |
US7711652B2 (en) | 2001-04-05 | 2010-05-04 | Audible Magic Corporation | Copyright detection and protection system and method |
US20090077673A1 (en) * | 2001-04-05 | 2009-03-19 | Schmelzer Richard A | Copyright detection and protection system and method |
US8484691B2 (en) | 2001-04-05 | 2013-07-09 | Audible Magic Corporation | Copyright detection and protection system and method |
US20050154678A1 (en) * | 2001-04-05 | 2005-07-14 | Audible Magic Corporation | Copyright detection and protection system and method |
US8082150B2 (en) | 2001-07-10 | 2011-12-20 | Audible Magic Corporation | Method and apparatus for identifying an unknown work |
US7877438B2 (en) | 2001-07-20 | 2011-01-25 | Audible Magic Corporation | Method and apparatus for identifying new media content |
US8972481B2 (en) | 2001-07-20 | 2015-03-03 | Audible Magic, Inc. | Playlist generation method and apparatus |
US20030033321A1 (en) * | 2001-07-20 | 2003-02-13 | Audible Magic, Inc. | Method and apparatus for identifying new media content |
US10025841B2 (en) | 2001-07-20 | 2018-07-17 | Audible Magic, Inc. | Play list generation method and apparatus |
US20030135623A1 (en) * | 2001-10-23 | 2003-07-17 | Audible Magic, Inc. | Method and apparatus for cache promotion |
US20040163106A1 (en) * | 2003-02-01 | 2004-08-19 | Audible Magic, Inc. | Method and apparatus to identify a work received by a processing system |
US8332326B2 (en) * | 2003-02-01 | 2012-12-11 | Audible Magic Corporation | Method and apparatus to identify a work received by a processing system |
US20060034177A1 (en) * | 2004-07-28 | 2006-02-16 | Audible Magic Corporation | System for distributing decoy content in a peer to peer network |
US8130746B2 (en) | 2004-07-28 | 2012-03-06 | Audible Magic Corporation | System for distributing decoy content in a peer to peer network |
US20080134346A1 (en) * | 2004-08-05 | 2008-06-05 | Yeong-Sub Cho | Transactions Certification Method And System To Protect Privacy On Details Of Electronic Transactions |
US7660413B2 (en) | 2005-04-08 | 2010-02-09 | Shahram Partovi | Secure digital couriering system and method |
US20060230072A1 (en) * | 2005-04-08 | 2006-10-12 | Dlcom Grid Inc. | Secure digital couriering system and method |
US8794294B2 (en) | 2005-04-15 | 2014-08-05 | Seda S.P.A. | Insulated container, method of fabricating same and apparatus for fabricating |
US8360263B2 (en) | 2005-04-15 | 2013-01-29 | Seda S.P.A. | Insulated container, method of fabricating same and apparatus for fabricating |
US20060237465A1 (en) * | 2005-04-15 | 2006-10-26 | D Amato Gianfranco | Insulated container, method of fabricating same and apparatus for fabricating |
US8932428B2 (en) | 2005-04-15 | 2015-01-13 | Seda S.P.A. | Insulated container, method of fabricating same and apparatus for fabricating |
US20110289095A1 (en) * | 2005-08-08 | 2011-11-24 | Google Inc. | Agent rank |
US9002856B2 (en) * | 2005-08-08 | 2015-04-07 | Google Inc. | Agent rank |
US20100242087A1 (en) * | 2005-08-11 | 2010-09-23 | Canon Kabushiki Kaisha | Display data transmission device and method thereof |
WO2007043989A1 (en) * | 2005-08-30 | 2007-04-19 | Amdocs Software Systems Limited | Pay-per-view payment system and method |
US9783359B2 (en) | 2005-09-08 | 2017-10-10 | Seda S.P.A. | Double-walled cup |
US7529659B2 (en) | 2005-09-28 | 2009-05-05 | Audible Magic Corporation | Method and apparatus for identifying an unknown work |
US8146797B2 (en) | 2005-11-11 | 2012-04-03 | Seda S.P.A. | Insulated cup |
US8393886B2 (en) | 2005-11-14 | 2013-03-12 | Seda S.P.A. | Device for producing a stacking projection and container with same |
US20160342805A1 (en) * | 2005-12-29 | 2016-11-24 | Nextlabs, Inc. | Analyzing Activity Data of an Information Management System |
US9094194B2 (en) | 2006-04-18 | 2015-07-28 | International Business Machines Corporation | Method and system for automating the recovery of a credential store when a user has forgotten their password using a temporary key pair created based on a new password provided by the user |
US20070255943A1 (en) * | 2006-04-18 | 2007-11-01 | Kern David S | Method and system for automating the recovery of a credential store |
US20100326869A1 (en) * | 2006-12-05 | 2010-12-30 | Seda S.P.A. | Package |
US8191708B2 (en) | 2006-12-05 | 2012-06-05 | Seda S.P.A. | Package |
US8807339B2 (en) | 2006-12-05 | 2014-08-19 | Seda Spa | Package |
US8490792B2 (en) | 2006-12-05 | 2013-07-23 | Seda S.P.A. | Package |
US8240476B2 (en) | 2006-12-05 | 2012-08-14 | Seda S.P.A. | Package |
US8267250B2 (en) | 2006-12-05 | 2012-09-18 | Seda S.P.A. | Package |
US20090007279A1 (en) * | 2007-06-28 | 2009-01-01 | Microsoft Corporation | Rights enforcement of unencrypted content |
US8656506B2 (en) | 2007-06-28 | 2014-02-18 | Microsoft Corporation | Rights enforcement of unencrypted content |
US9785757B2 (en) | 2007-07-27 | 2017-10-10 | Audible Magic Corporation | System for identifying content of digital data |
US8006314B2 (en) | 2007-07-27 | 2011-08-23 | Audible Magic Corporation | System for identifying content of digital data |
US20090030651A1 (en) * | 2007-07-27 | 2009-01-29 | Audible Magic Corporation | System for identifying content of digital data |
US8732858B2 (en) | 2007-07-27 | 2014-05-20 | Audible Magic Corporation | System for identifying content of digital data |
US9268921B2 (en) | 2007-07-27 | 2016-02-23 | Audible Magic Corporation | System for identifying content of digital data |
US10181015B2 (en) | 2007-07-27 | 2019-01-15 | Audible Magic Corporation | System for identifying content of digital data |
US8112818B2 (en) | 2007-07-27 | 2012-02-07 | Audible Magic Corporation | System for identifying content of digital data |
US8745690B2 (en) * | 2007-12-20 | 2014-06-03 | Sap Ag | Deriving service provider constraints from service consumer context |
US20090165079A1 (en) * | 2007-12-20 | 2009-06-25 | Frank Brunswig | Deriving Service Provider Constraints From Service Consumer Context |
US10552701B2 (en) * | 2008-02-01 | 2020-02-04 | Oath Inc. | System and method for detecting the source of media content with application to business rules |
US20200151486A1 (en) * | 2008-02-01 | 2020-05-14 | Oath Inc. | System and method for controlling content upload on a network |
US11693928B2 (en) * | 2008-02-01 | 2023-07-04 | Verizon Patent And Licensing Inc. | System and method for controlling content upload on a network |
US20090196465A1 (en) * | 2008-02-01 | 2009-08-06 | Satish Menon | System and method for detecting the source of media content with application to business rules |
US11521194B2 (en) * | 2008-06-06 | 2022-12-06 | Paypal, Inc. | Trusted service manager (TSM) architectures and methods |
US20150006411A1 (en) * | 2008-06-11 | 2015-01-01 | James D. Bennett | Creative work registry |
US8489683B2 (en) | 2008-12-24 | 2013-07-16 | Research In Motion Limited | System, network and method for multi-platform publishing and synchronized content |
US8176121B2 (en) * | 2008-12-24 | 2012-05-08 | Leblanc Michael | System, network and method for multi-platform publishing and synchronized content |
US20100161729A1 (en) * | 2008-12-24 | 2010-06-24 | Chalk Media Service Corp. | System, network and method for multi-platform publishing and synchronized content |
US20100169394A1 (en) * | 2008-12-26 | 2010-07-01 | Sandisk Il Ltd. | Method and apparatus for providing access to files based on user identity |
US8943409B2 (en) | 2008-12-26 | 2015-01-27 | Sandisk Il Ltd. | Storage device managing playable content |
US8972426B2 (en) | 2008-12-26 | 2015-03-03 | Sandisk Il Ltd. | Storage device presenting to hosts only files compatible with a defined host capability |
US8239395B2 (en) | 2008-12-26 | 2012-08-07 | Sandisk Il Ltd. | Storage device presenting to hosts only files compatible with a defined host capability |
US20100169395A1 (en) * | 2008-12-26 | 2010-07-01 | Sandisk Il Ltd. | Device and method for filtering a file system |
US8166067B2 (en) * | 2008-12-26 | 2012-04-24 | Sandisk Il Ltd. | Method and apparatus for providing access to files based on user identity |
US20100169780A1 (en) * | 2008-12-26 | 2010-07-01 | Sandisk Il Ltd. | Storage device managing playable content |
US20100169393A1 (en) * | 2008-12-26 | 2010-07-01 | Sandisk Il Ltd. | Storage device presenting to hosts only files compatible with a defined host capability |
US8199651B1 (en) | 2009-03-16 | 2012-06-12 | Audible Magic Corporation | Method and system for modifying communication flows at a port level |
US9052919B2 (en) * | 2010-01-15 | 2015-06-09 | Apple Inc. | Specialized network fileserver |
US10091203B2 (en) * | 2010-01-15 | 2018-10-02 | Apple Inc. | Specialized network fileserver |
US20150341366A1 (en) * | 2010-01-15 | 2015-11-26 | Apple Inc. | Specialized network fileserver |
US10305910B2 (en) | 2010-01-15 | 2019-05-28 | Apple Inc. | Accessing specialized fileserver |
US20110179203A1 (en) * | 2010-01-15 | 2011-07-21 | Galloway Curtis C | Portable Storage Interface |
US8307134B2 (en) | 2010-01-15 | 2012-11-06 | Apple Inc. | Multiple communication interfaces on a portable storage device |
TWI485564B (en) * | 2010-01-15 | 2015-05-21 | Apple Inc | Specialized network fileserver |
US20110179083A1 (en) * | 2010-01-15 | 2011-07-21 | Galloway Curtis C | Accessing Specialized Fileserver |
US20110179096A1 (en) * | 2010-01-15 | 2011-07-21 | Galloway Curtis C | Specialized Network Fileserver |
US9027152B2 (en) * | 2010-07-27 | 2015-05-05 | Fasoo.Com Co., Ltd | Device for right managing web data, recording medium for performing method for right managing web data on computer, and device and method for providing right management information |
US20130298257A1 (en) * | 2010-07-27 | 2013-11-07 | Fasoo.Com Co., Ltd | Device for right managing web data, recording medium for performing method for right managing web data on computer, and device and method for providing right management information |
US20120124642A1 (en) * | 2010-11-17 | 2012-05-17 | Samsung Sds Co., Ltd. | Apparatus and method for selectively decrypting and transmitting drm contents |
CN102542195A (en) * | 2010-11-17 | 2012-07-04 | 三星Sds株式会社 | Apparatus and method for selectiveley decrypting and transmitting DRM contents |
US9460277B2 (en) * | 2010-12-06 | 2016-10-04 | International Business Machines Corporation | Identity based auditing in a multi-product environment |
US20120144453A1 (en) * | 2010-12-06 | 2012-06-07 | International Business Machines Corporation | Identity based auditing in a multi-product environment |
US9426158B1 (en) * | 2010-12-15 | 2016-08-23 | Amazon Technologies, Inc. | Client device connectivity with integrated business rules and multiple network types |
US11595820B2 (en) | 2011-09-02 | 2023-02-28 | Paypal, Inc. | Secure elements broker (SEB) for application communication channel selector optimization |
US20220004649A1 (en) * | 2011-12-09 | 2022-01-06 | Sertainty Corporation | System and methods for using cipher objects to protect data |
US9135460B2 (en) * | 2011-12-22 | 2015-09-15 | Microsoft Technology Licensing, Llc | Techniques to store secret information for global data centers |
US20130167200A1 (en) * | 2011-12-22 | 2013-06-27 | Microsoft Corporation | Techniques to store secret information for global data centers |
US10698952B2 (en) | 2012-09-25 | 2020-06-30 | Audible Magic Corporation | Using digital fingerprints to associate data with a work |
US9608824B2 (en) | 2012-09-25 | 2017-03-28 | Audible Magic Corporation | Using digital fingerprints to associate data with a work |
US9081778B2 (en) | 2012-09-25 | 2015-07-14 | Audible Magic Corporation | Using digital fingerprints to associate data with a work |
EP3274894A4 (en) * | 2015-07-22 | 2018-01-31 | Samsung Electronics Co., Ltd. | Display apparatus and display method |
US20210150003A1 (en) * | 2018-07-09 | 2021-05-20 | Dish Network L.L.C. | Content anti-piracy management system and method |
US11599604B2 (en) * | 2018-07-09 | 2023-03-07 | Dish Network L.L.C. | Content anti-piracy management system and method |
US20230222188A1 (en) * | 2018-07-09 | 2023-07-13 | Dish Network L.L.C. | Content anti-piracy management system and method |
CN110069476A (en) * | 2019-04-25 | 2019-07-30 | 安康学院 | A kind of Management System for Clients Information |
WO2022126644A1 (en) * | 2020-12-18 | 2022-06-23 | 华为技术有限公司 | Model protection device, method, and computing device |
Also Published As
Publication number | Publication date |
---|---|
WO2004061623A1 (en) | 2004-07-22 |
AU2003292431A1 (en) | 2004-07-29 |
Similar Documents
Publication | Publication Date | Title |
---|---|---|
US20040133797A1 (en) | Rights management enhanced storage | |
KR100467929B1 (en) | System for protecting and managing digital contents | |
US6098056A (en) | System and method for controlling access rights to and security of digital content in a distributed information system, e.g., Internet | |
EP1686504B1 (en) | Flexible licensing architecture in content rights management systems | |
US7421741B2 (en) | Securing digital content system and method | |
US8275709B2 (en) | Digital rights management of content when content is a future live event | |
US8078725B2 (en) | Method and system for secure distribution and utilization of data over a network | |
EP1477879B1 (en) | Tying a digital license to a user and tying the user to multiple computing devices in a digital rights management (DRM) system | |
KR100689648B1 (en) | Method, apparatus and system for securely providing material to a licensee of the material | |
EP2770455B1 (en) | Method and system to exercise geographic restrictions over the distribution of content via a network | |
US20140380436A1 (en) | Digital rights management of content when content is a future live event | |
US20020194492A1 (en) | Method of protecting and managing digital contents and system for using thereof | |
CN108683626B (en) | Data access control method and device | |
JP2004530222A (en) | Method and apparatus for supporting multiple zones of trust in a digital rights management system | |
AU2001269856A1 (en) | Methods and systems to distribute content via a network utilizing distributed conditional access agents and secure agents, and to perform digital rights management (drm) | |
CN101637005A (en) | Methods, systems, and apparatus for fragmented file sharing | |
KR20060002755A (en) | Distribution and rights management of digital content | |
CA2405489A1 (en) | Secure digital content licensing system and method | |
AU2002351508A1 (en) | Method, apparatus and system for securely providing material to a licensee of the material | |
US20030014652A1 (en) | Licensing method and license providing system | |
JP2004297550A (en) | Content management system and content distribution system | |
KR100768501B1 (en) | Digital contents electronic commerce system and method in which digital right is protected and memory media recoding program to operate the method | |
KR20050059347A (en) | United p2p method for digital cartoon contents | |
JP2004048557A (en) | Device, method and program of contents distribution and recording medium |
Legal Events
Date | Code | Title | Description |
---|---|---|---|
AS | Assignment |
Owner name: INTERNATIONAL BUSINESS MACHINES CORPORATION, NEW Y Free format text: ASSIGNMENT OF ASSIGNORS INTEREST;ASSIGNOR:ARNOLD, GORDON K.;REEL/FRAME:013638/0936 Effective date: 20021127 |
|
STCB | Information on status: application discontinuation |
Free format text: ABANDONED -- FAILURE TO RESPOND TO AN OFFICE ACTION |